$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.mft File: djUTLn1AWlRkWzst-y4KA9_0VsM.mft (raw, json) Hash identifier: 9NzNvM18QoKN4Td1wSGTBmCcI45iEUgiFs8slsDGwTk= Subject key identifier: 57:91:A7:78:FE:21:B6:2F:5C:65:CC:A0:E7:79:4C:AD:92:A5:14:53 Authority key identifier: 76:35:13:2E:7D:40:5A:54:64:5B:3B:2D:FB:2E:0A:03:DF:F4:56:C3 Certificate issuer: /CN=A91F6799/serialNumber=7635132E7D405A54645B3B2DFB2E0A03DFF456C3 Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djUTLn1AWlRkWzst-y4KA9_0VsM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.mft Manifest number: 98 Signing time: Tue 01 Jul 2025 07:05:57 +0000 Manifest this update: Tue 01 Jul 2025 07:05:56 +0000 Manifest next update: Tue 08 Jul 2025 07:05:56 +0000 Files and hashes: 1: djUTLn1AWlRkWzst-y4KA9_0VsM.crl (hash: 61DHqq832Dt1ZT3jwLrc86RgtuPOILr7Yn5lrhzRekc=) 2: F13B6A3C70A711EFBA8AFF10C4F9AE02.roa (hash: Q9yPm3gs8BRfJ5g6BfqBpNgsQGDHcY41Tws1eH6Cg1w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.crl rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djUTLn1AWlRkWzst-y4KA9_0VsM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:05:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6799, serialNumber=7635132E7D405A54645B3B2DFB2E0A03DFF456C3 Validity Not Before: Jul 1 07:05:56 2025 GMT Not After : Jul 8 07:05:56 2025 GMT Subject: CN=686388d4-ede2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a7:a2:28:44:b5:e1:87:c1:4e:1e:a3:e5:90: 16:e4:26:76:2d:b4:7f:3b:38:2b:f0:24:b1:09:85: fb:2e:64:1f:11:45:25:20:77:a4:79:46:ee:79:6e: 99:bb:44:bb:8b:d7:a8:5d:9d:4e:1d:05:61:90:3f: a5:b2:c6:ac:ad:4a:45:a7:e7:04:4e:83:8b:40:a1: c2:f1:29:42:64:7d:f2:2b:20:4c:d8:d4:7f:12:d5: 0b:91:37:68:10:36:94:99:86:08:c6:83:e4:34:6d: 1e:94:a1:e1:08:d7:91:e0:18:fb:5b:86:32:fb:8e: c6:34:4a:33:35:61:0e:2d:8e:56:1b:9f:eb:ef:f9: 78:f4:b0:ac:ec:d4:62:60:9c:29:3f:f4:46:ee:11: 9d:13:5b:87:52:c0:69:4a:29:c9:02:a7:55:52:e2: 39:0c:08:10:7b:d4:61:7c:65:de:08:e1:28:21:23: 8f:d9:e7:30:82:c6:04:ae:7b:9e:b1:88:2d:b7:0b: 73:74:8d:46:cb:bd:37:c8:e5:75:fa:1a:23:3c:36: 03:94:e3:26:12:4b:e2:27:9f:f9:e7:f0:7f:2c:70: 3f:d8:01:80:f7:6e:49:93:10:68:be:bb:f5:9f:75: 9b:1f:91:df:15:97:ad:51:65:52:ae:8f:7b:51:3b: 51:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:91:A7:78:FE:21:B6:2F:5C:65:CC:A0:E7:79:4C:AD:92:A5:14:53 X509v3 Authority Key Identifier: keyid:76:35:13:2E:7D:40:5A:54:64:5B:3B:2D:FB:2E:0A:03:DF:F4:56:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djUTLn1AWlRkWzst-y4KA9_0VsM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6799/ED9E60B2709F11EFA570BE4DC4F9AE02/djUTLn1AWlRkWzst-y4KA9_0VsM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:fe:ec:7f:b2:49:8c:23:ae:8a:fd:d8:c3:f6:32:4b:3f:4f: 50:46:5d:24:c7:99:9f:9c:13:14:34:7d:5f:c6:a8:02:d0:46: d4:f2:b6:2c:16:44:86:53:06:1f:47:e8:d5:3c:43:31:16:6d: 79:70:ae:21:86:6a:1f:d4:e1:b7:d3:e8:38:b6:3b:6d:c0:8e: f0:f6:f1:90:16:47:74:7e:fc:01:68:38:97:e1:5b:89:3b:ff: 44:05:f5:9d:d0:63:88:8b:bc:66:a3:2d:03:c5:7c:c1:df:20: 08:f9:4c:54:ed:a5:71:b8:77:a3:b2:9b:0e:13:95:be:5b:b7: 00:54:c1:ab:ef:d8:8d:c4:92:0a:e2:ad:a8:2b:62:fb:0f:23: d5:ff:bd:a7:67:de:bc:4a:9f:24:90:7b:98:18:28:8b:de:ea: 81:37:dc:84:ea:a3:69:db:00:c7:7b:69:2e:41:b6:f9:91:2a: 61:f3:c8:ca:03:0e:fa:ab:e4:0f:08:d4:4a:62:3d:4f:61:28: 68:40:7f:f9:9e:9a:fa:74:21:98:e2:7e:9d:b6:71:a1:d5:44: bb:a2:20:01:a8:94:f6:b9:2a:62:2d:ce:6a:2f:48:37:1b:b2: 11:4b:81:3e:a3:cc:b1:fa:bb:05:64:29:ed:52:5e:02:4b:07: c8:92:61:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY3OTkxMTAvBgNVBAUTKDc2MzUxMzJFN0Q0MDVBNTQ2NDVCM0IyREZCMkUwQTAz REZGNDU2QzMwHhcNMjUwNzAxMDcwNTU2WhcNMjUwNzA4MDcwNTU2WjAYMRYwFAYD VQQDEw02ODYzODhkNC1lZGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwqeiKES14YfBTh6j5ZAW5CZ2LbR/Ozgr8CSxCYX7LmQfEUUlIHekeUbueW6Z u0S7i9eoXZ1OHQVhkD+lssasrUpFp+cEToOLQKHC8SlCZH3yKyBM2NR/EtULkTdo EDaUmYYIxoPkNG0elKHhCNeR4Bj7W4Yy+47GNEozNWEOLY5WG5/r7/l49LCs7NRi YJwpP/RG7hGdE1uHUsBpSinJAqdVUuI5DAgQe9RhfGXeCOEoISOP2ecwgsYErnue sYgttwtzdI1Gy703yOV1+hojPDYDlOMmEkviJ5/55/B/LHA/2AGA925JkxBovrv1 n3WbH5HfFZetUWVSro97UTtRDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFeRp3j+ IbYvXGXMoOd5TK2SpRRTMB8GA1UdIwQYMBaAFHY1Ey59QFpUZFs7LfsuCgPf9FbD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjc5OS9FRDlFNjBCMjcw OUYxMUVGQTU3MEJFNERDNEY5QUUwMi9kalVUTG4xQVdsUmtXenN0LXk0S0E5XzBW c00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RqVVRMbjFBV2xSa1d6c3QteTRLQTlfMFZzTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Njc5OS9FRDlFNjBCMjcwOUYxMUVGQTU3MEJFNERDNEY5QUUwMi9kalVUTG4xQVds UmtXenN0LXk0S0E5XzBWc00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBM/ux/skmMI66K/djD9jJLP09QRl0kx5mfnBMUNH1fxqgC0EbU8rYs FkSGUwYfR+jVPEMxFm15cK4hhmof1OG30+g4tjttwI7w9vGQFkd0fvwBaDiX4VuJ O/9EBfWd0GOIi7xmoy0DxXzB3yAI+UxU7aVxuHejspsOE5W+W7cAVMGr79iNxJIK 4q2oK2L7DyPV/72nZ968Sp8kkHuYGCiL3uqBN9yE6qNp2wDHe2kuQbb5kSph88jK Aw76q+QPCNRKYj1PYShoQH/5npr6dCGY4n6dtnGh1US7oiABqJT2uSpiLc5qL0g3 G7IRS4E+o8yx+rsFZCntUl4CSwfIkmGF -----END CERTIFICATE-----Generated at Wed Jul 2 12:14:53 2025 by rpki-client